Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/3139322e3134302e39322e302f32322d3234203d3e20323635373131.roa
File:                     3139322e3134302e39322e302f32322d3234203d3e20323635373131.roa (raw, json)
Hash identifier:          cCy/nZVvWQid4P5OntovlZzFVIUpkydOR4b3pGKLpyQ=
Subject key identifier:   59:63:36:92:E6:05:46:C6:14:E3:46:C4:EF:07:06:57:22:8D:D9:57
Certificate issuer:       /CN=12A120543D4989758BFB0561CAF5C57A23A55B08
Certificate serial:       730684A5AB5E36657448D9ED00E342A16F2AB868
Authority key identifier: 12:A1:20:54:3D:49:89:75:8B:FB:05:61:CA:F5:C5:7A:23:A5:5B:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A120543D4989758BFB0561CAF5C57A23A55B08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/3139322e3134302e39322e302f32322d3234203d3e20323635373131.roa
Signing time:             Tue 05 Mar 2024 17:45:08 +0000
ROA not before:           Tue 05 Mar 2024 17:40:08 +0000
ROA not after:            Tue 04 Mar 2025 17:45:08 +0000
asID:                     265711
IP address blocks:        192.140.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/12A120543D4989758BFB0561CAF5C57A23A55B08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/12A120543D4989758BFB0561CAF5C57A23A55B08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A120543D4989758BFB0561CAF5C57A23A55B08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:06:84:a5:ab:5e:36:65:74:48:d9:ed:00:e3:42:a1:6f:2a:b8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12A120543D4989758BFB0561CAF5C57A23A55B08
        Validity
            Not Before: Mar  5 17:40:08 2024 GMT
            Not After : Mar  4 17:45:08 2025 GMT
        Subject: CN=59633692E60546C614E346C4EF070657228DD957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:35:02:e8:a1:44:9d:c9:4b:44:71:1a:63:
                    04:05:79:01:4d:9c:46:1f:54:17:ff:d0:65:2b:bf:
                    35:38:f7:51:d1:67:f6:20:9e:42:ca:c9:f5:13:29:
                    2a:5f:9c:b9:d9:50:7d:23:1b:a1:83:e7:a9:08:bc:
                    a3:36:77:03:70:1c:18:bb:49:08:e5:46:57:86:68:
                    22:4d:60:76:a3:1d:c4:9f:87:40:07:ac:76:ed:53:
                    cc:15:a1:9d:2d:e5:a7:e3:e8:5d:d5:b6:67:92:78:
                    9e:08:23:db:3b:e7:ba:62:b0:8c:80:90:e8:bb:c8:
                    86:4c:8d:9c:8b:90:a2:6e:c8:1e:36:2c:32:c3:0b:
                    87:76:79:5a:df:68:bf:e4:df:98:30:45:c3:65:4b:
                    49:ce:0d:3b:bd:46:56:9c:25:95:cd:fe:91:4a:72:
                    96:a4:8f:22:8e:3f:23:a1:05:1a:2f:d3:db:49:e8:
                    e7:49:d9:11:7b:f2:96:2b:88:7a:ab:b1:eb:db:e8:
                    1d:b8:c0:6a:9c:1a:95:c2:a9:b9:2d:77:2b:74:0e:
                    89:07:d1:d0:36:fa:7b:a1:1d:1a:fb:14:c5:91:53:
                    60:6a:e6:72:e4:0a:00:6d:e8:cf:7d:b8:9b:c0:18:
                    eb:d4:48:06:96:8e:07:73:50:c9:e6:95:a0:19:64:
                    8e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:63:36:92:E6:05:46:C6:14:E3:46:C4:EF:07:06:57:22:8D:D9:57
            X509v3 Authority Key Identifier:
                keyid:12:A1:20:54:3D:49:89:75:8B:FB:05:61:CA:F5:C5:7A:23:A5:5B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/12A120543D4989758BFB0561CAF5C57A23A55B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A120543D4989758BFB0561CAF5C57A23A55B08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/3139322e3134302e39322e302f32322d3234203d3e20323635373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:76:15:44:58:55:b8:4f:76:16:dd:f3:64:16:5d:4e:41:88:
         65:ce:ee:7c:c1:4b:e3:95:74:83:2c:71:c1:d8:10:31:53:f5:
         07:93:8a:db:4f:5c:db:75:6c:bf:33:e3:79:7d:fc:bd:e1:32:
         76:e0:60:a4:89:42:6c:d1:e9:19:3e:df:f8:f1:4b:fc:b1:88:
         55:99:c9:58:14:d4:8e:2c:e0:f3:2e:8e:60:79:e9:f3:4f:60:
         d7:ec:80:67:07:8d:82:d6:18:96:37:7c:a9:21:35:b7:99:a7:
         88:2a:9e:bf:11:db:a9:95:d1:ef:09:74:e6:f9:8d:da:d9:66:
         5a:9c:6d:7c:30:54:7c:1a:9f:cd:22:a6:b5:72:f0:5f:95:73:
         d9:67:38:8c:08:54:b9:0f:dc:3e:af:b4:75:19:38:db:36:65:
         f2:cf:bc:b8:71:35:b9:ea:7b:cb:52:9a:45:46:8d:7b:06:9a:
         d3:d5:da:72:7e:26:12:54:68:97:82:f9:d6:de:30:32:0e:f9:
         bb:28:86:4e:62:4f:2a:60:a8:2b:49:35:3a:91:a7:59:01:24:
         c5:14:90:12:77:ee:02:79:bf:0e:7d:c2:20:3b:10:21:a9:81:
         e7:b5:15:61:ae:e9:ef:a9:37:64:0c:79:b6:23:9a:36:42:73:
         75:08:ee:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org